At Roche, you can be your authentic self and are valued for your unique qualities. Our culture fosters personal expression, open dialogue, and genuine connections. Here, you are appreciated, accepted, and respected for who you are—creating an environment where you can grow both personally and professionally. Together, we aim to prevent, stop, and cure diseases and ensure everyone has access to healthcare—today and in the future. Join Roche, where every voice matters. The Position At the heart of our digital security is the trust we build through seamless, secure, and authenticated access. As a Junior Web Access Management Engineer, you will join our Identity and Access Management (IAM) team to help manage and secure our web application access controls and identity federation systems. You’ll be instrumental in ensuring that our Single Sign\-On (SSO) integrations, Multi\-Factor Authentication (MFA) policies, and API gateway access run without a hitch. This is a growth\-oriented role where you will learn to navigate complex application security infrastructures while contributing to the automation and optimization of secure access workflows. Job Responsibilities Scope * Support the day\-to\-day administration of enterprise IAM and Web Access Control (WAC) platforms (such as Okta, Microsoft Entra ID, Ping Identity, or Auth0\), including basic policy management and standard troubleshooting. * Assist in integrating applications with central Identity Providers (IdPs) using standard authentication and authorization protocols, including SAML, OAuth 2\.0, and OpenID Connect (OIDC). * Support the deployment, monitoring, and validation of Multi\-Factor Authentication (MFA) mechanisms, including TOTP, security keys (FIDO2/WebAuthn), and passwordless authentication methods. * Participate in the automation of routine access management tasks, user provisioning policies (such as JIT or basic SCIM setups), and configuration management using Version Control systems and scripting (PowerShell, Bash, or Python). * Collaborate with senior engineers to troubleshoot session management anomalies, token validation (JWT) issues, and secure communications across web server and API gateway environments. Impact/Strategy * Collaborate in the automation of routine application access configuration and user lifecycle tasks using basic scripting (PowerShell, Python, or Bash) and maintain scripts using version control systems. * Assist in maintaining team internal wikis, standard operating procedures (SOPs), and runbooks for application integrations and access management lifecycles. * Collaborate with senior engineers to route, distribute, and validate authentication tokens, access policies, and application gateways across diverse staging and production environments. Complexity * Focuses primarily on executing defined procedures, troubleshooting authentication and access issues, and engage to senior team members for complex IAM anomalies . * Contributes to team agility by identifying operational inefficiencies (such as manual provisioning friction) and proposing minor process improvements within immediate daily tasks. * Demonstrates growing autonomy within the specific domain by translating daily integration requirements into structured tasks under direct supervision. Business/Technical Ability * Possesses a working knowledge of the Identity and Access Management (IAM) domain and supporting web access technologies. * Understands sources of influence, comprehending internal and external factors (such as compliance, user friction, and security threats) affecting the secure web access space, and is capable of identifying and analyzing basic access management problems or opportunities holistically. Qualifications Education / Experience * Experience: 1–2 years of experience in an IT Helpdesk, Systems Administration, junior Web Development, or junior Security Operations (SOC) role. An internship focused on web development, infrastructure, or Identity and Access Management (IAM) is highly valued. * Education: Bachelor’s Degree in Computer Science, Software Engineering, Cyber Security, or equivalent practical experience. * Working knowledge of relevant business domains and supporting cybersecurity/web technologies. * Demonstrated ability to independently handle defined tasks and contribute to various stages of the security and application analysis lifecycle. Technical Skills * Understanding of Zero Trust principles, authentication factors, and modern identity workflows. * A solid understanding of web authentication and authorization protocols (SAML, OAuth 2\.0, OIDC) and secure communication basics (HTTP/HTTPS, RESTful APIs, session tokens, and JWTs). * Exposure to modern web development languages and frameworks (e.g., JavaScript/TypeScript, React, Angular, Node.js, Python, or Go) to assist with frontend authentication integrations. * Working knowledge of user directory services (Active Directory, LDAP) and standard provisioning methods (SCIM, Just\-In\-Time provisioning). * Familiarity with Git for version control and basic exposure to scripting (PowerShell, Bash, or Python) for automating repetitive administration tasks. * Communication skills to collaborate effectively within Agile/cross\-functional teams, with a structured approach to problem\-solving. * Eagerness to learn and a desire to work toward foundational certifications like CompTIA Security\+, Microsoft SC\-300 (Identity and Access Administrator), or PingID Certified Professional. Additional Qualifications * A mindset of continuous improvement with a proactive approach to identifying solution\-level issues, gaps, or inefficiencies in access workflows. * Strong analytical and logical reasoning skills to identify authentication discrepancies, challenge assumptions, and confidently present solutions. Who We Are A healthier future drives our innovation. More than 100,000 employees worldwide work together to achieve scientific breakthroughs and ensure everyone has access to healthcare—today and for future generations. Through our commitment, over 26 million people are treated with our medicines and more than 30 billion tests are performed using our diagnostic products. We encourage each other to explore new possibilities, foster creativity, and set ambitious goals to deliver life-changing health solutions. Together, we can shape a healthier future. Roche is an equal opportunity employer.
David Muñoz
Indeed · HR
David Muñoz
Indeed · HR
